full-disclosure - Re: Expired certificate

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 26 Jul 2010 13:49:01 -0500
From: Marsh Ray <marsh@...endedsubset.com>
To: Dan Kaminsky <dan@...para.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Expired certificate

On 07/25/2010 07:24 PM, Dan Kaminsky wrote:
>
> You know, it's strange.  I never hear stories about networks being taken
> down for nonpayment of electric bills, but we have straight up UI
> support for certificate errors.  Why do you think that is?

Because the Accounting department is in charge of paying the power bill, 
not Network Operations or IT.

The departments are just managed differently. NetOps is about 
instantaneous uptime and periodic upgrades. Accounting is about past, 
current and future periods.

Also, organizations have hundreds of years experience in just how badly 
things go wrong when Accounting gets under-resourced and overly 
interrupt-driven. Even an imploding organization maintains that staff to 
the end.

- Marsh

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/